414 matches found
CVE-2016-4630
ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted EXR image with B44 compression...
CVE-2016-4630
ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted EXR image with B44 compression...
CVE-2016-4629
ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted xStride and yStride values in an EXR image...
CVE-2016-4629
ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted xStride and yStride values in an EXR image...
Memory corruption
ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted xStride and yStride values in an EXR image...
Memory corruption
ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted EXR image with B44 compression...
CVE-2016-4630
ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted EXR image with B44 compression...
CVE-2016-4629
ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted xStride and yStride values in an EXR image...
CVE-2016-4629
CVE-2016-4629 affects Apple’s OS X ImageIO (OS X before 10.11.6). A crafted EXR image can trigger memory corruption via signed xStride/yStride values, enabling remote code execution or a denial of service. Apple lists OS X 10.11.6 (El Capitan) and Security Update 2016-004 as the fix; patching is ...
CVE-2016-4630
CVE-2016-4630 : Apple ImageIO on OS X (EXR/B44 compression) is affected by a memory-corruption vulnerability that can enable remote code execution when processing crafted EXR images. Disclosed in 2016 with public exploit details showing a heap-based overflow risk due to improper handling of B44 c...
Apple Image I/O EXR Color Component Remote Code Execution Vulnerability
SUMMARY An exploitable heap based buffer overflow exists in the handling of EXR images on OS X. A crafted EXR document can lead to a heap based buffer overflow resulting in remote code execution. Vulnerability can be triggered via a saved EXR file delivered by other means when opened in any...
Apple Image I/O EXR Compression Remote Code Execution Vulnerability
SUMMARY An exploitable heap based buffer overflow exists in the handling of EXR images on OS X. A crafted EXR document can lead to a heap based buffer overflow resulting in remote code execution. Vulnerability can be triggered via a saved EXR file delivered by other means when opened in any...
USN-831-1: OpenEXR vulnerabilities
Drew Yao discovered several flaws in the way OpenEXR handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user...
